Medium RHSA-2026:55774 3 CVEs

Red Hat Security Advisory: java-1.8.0-openjdk security update

Published Aug 20, 2026 · Updated Oct 20, 2026

Ecosystem: Red Hat

Fixed packages 9

Release	Package	Fixed in
Red Hat · RHEL 7 ELS rhel_els:7	java-1.8.0-openjdk	1:1.8.0.504.b01-1.1.el7_9
Red Hat · RHEL 7 ELS rhel_els:7	java-1.8.0-openjdk-accessibility	1:1.8.0.504.b01-1.1.el7_9
Red Hat · RHEL 7 ELS rhel_els:7	java-1.8.0-openjdk-debuginfo	1:1.8.0.504.b01-1.1.el7_9
Red Hat · RHEL 7 ELS rhel_els:7	java-1.8.0-openjdk-demo	1:1.8.0.504.b01-1.1.el7_9
Red Hat · RHEL 7 ELS rhel_els:7	java-1.8.0-openjdk-devel	1:1.8.0.504.b01-1.1.el7_9
Red Hat · RHEL 7 ELS rhel_els:7	java-1.8.0-openjdk-headless	1:1.8.0.504.b01-1.1.el7_9
Red Hat · RHEL 7 ELS rhel_els:7	java-1.8.0-openjdk-javadoc	1:1.8.0.504.b01-1.1.el7_9
Red Hat · RHEL 7 ELS rhel_els:7	java-1.8.0-openjdk-javadoc-zip	1:1.8.0.504.b01-1.1.el7_9
Red Hat · RHEL 7 ELS rhel_els:7	java-1.8.0-openjdk-src	1:1.8.0.504.b01-1.1.el7_9

Vulnerabilities 3

Medium 6.8

CVE-2026-61308

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition openjdk-8 openjdk-lts Debian Ubuntu

Aug 18, 2026
Medium 5.3

CVE-2026-70907

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition openjdk-8 openjdk-lts Debian Ubuntu

Aug 18, 2026
Low 3.7

CVE-2026-60589

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition openjdk-8 openjdk-lts Debian Ubuntu

Aug 18, 2026

References

article
https://access.redhat.com/security/updates/classification/#moderate
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_55774.json
report
https://access.redhat.com/security/cve/CVE-2026-60589
report
https://bugzilla.redhat.com/show_bug.cgi?id=2513035
advisory
https://www.cve.org/CVERecord?id=CVE-2026-60589
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-60589
report
https://access.redhat.com/security/cve/CVE-2026-61308
report
https://bugzilla.redhat.com/show_bug.cgi?id=2513037
advisory
https://www.cve.org/CVERecord?id=CVE-2026-61308
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-61308
report
https://access.redhat.com/security/cve/CVE-2026-70907
report
https://bugzilla.redhat.com/show_bug.cgi?id=2513038
advisory
https://www.cve.org/CVERecord?id=CVE-2026-70907
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-70907